1799562 - Crash on print preview with Cylance malware "protection"

Status: RESOLVED FIXED

(External Software Affecting Firefox :: Other, defect)

Description

[nemo]

Filing bug 1756190 again. It appears it regressed sometime recently (past week or so).
Any use of print preview crashes. Firefox only.

https://crash-stats.mozilla.org/report/index/9cf681ca-d2a4-4193-a709-d29e60221107

Comment 1

[Haik Aftandilian [:haik]]

Marking as S3 due to the low volume for this signature. If we're not able to get ahold of Cylance (:gcp has reached out to them before and we should try again), we may want to shift this to a blocking of all versions to avoid continually having to update our blocklist in response to crashes.

Comment 2

[nemo]

Heh, well I can tell you one reason for the low volume is my coworkers gave up on trying to print in firefox last time this happened, or use firefox at all on the VMs really..

I've been trying to evangelise to them to give it another try... But, yeah, I'm sure it'd still be low volume just due to the rarity of cylance and the fact that at present this reppearance is only in nightly, not beta, and requires, presumably, updated cylance.

Totally fine with blocking them across the board though. Heck, I'd do it myself if I knew how (is there a magic about:config? ☺ )

Comment 3

[Greg Stoll :gstoll]

Sorry about this - right now there's no way for you to block them, although it's something we're exploring for the future. I'll work on getting the current version of Cylance blocked soon.

Comment 4

[Greg Stoll :gstoll]

Attachment: Bug 1799562 - update version of Cylance to blocklist r=gcp

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/2dad8bc349e6
update version of Cylance to blocklist r=gcp

Comment 6

[Greg Stoll :gstoll]

The above change blocks the current version, and I've reached out to our contacts at Cylance to see whether this is something they can fix. If not we will blocklist all versions.

Comment 7

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/2dad8bc349e6

Comment 8

[Greg Stoll :gstoll]

Reopening in case we need to blocklist all versions of this DLL.

Comment 9

[Greg Stoll :gstoll]

We have not heard back from Cylance, and since this is an ongoing problem we're going to block all versions of this DLL.

Comment 10

[Greg Stoll :gstoll]

Attachment: Bug 1799562 - blocklist all versions of Cylance r=haik

Comment 11

[Iulian Moraru]

https://hg.mozilla.org/mozilla-central/rev/40147f657d5d